# Automated Email notification once new user created in Kibana **URL:** \ **Category:** Kibana\ **Created:** [November 18, 2024, 6:55am UTC](https://discuss.elastic.co/t/automated-email-notification-once-new-user-created-in-kibana/370674 "2024-11-18T06:55:41Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![Manoilayans](https://avatars.discourse-cdn.com/v4/letter/m/50afbb/32.png) [@Manoilayans](https://discuss.elastic.co/u/Manoilayans)\ **Post date:** [November 18, 2024, 6:55am UTC](https://discuss.elastic.co/t/automated-email-notification-once-new-user-created-in-kibana/370674/1 "2024-11-18T06:55:41Z")
I wish to enable Email Notification when we create a new user in Kibana and user should click link from the Email to navigate into login page in Kibana Console. Pls help !! ---
**Author:** ![jessgarson](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jessgarson/32/129841_2.png) [@jessgarson](https://discuss.elastic.co/u/jessgarson)\ **Post date:** [November 18, 2024, 11:47pm UTC](https://discuss.elastic.co/t/automated-email-notification-once-new-user-created-in-kibana/370674/2 "2024-11-18T23:47:29Z")
Thank you for contacting us, @Manoilayans. You can set up an alert to receive email notifications in Kibana when a new user is created. Start by selecting the Elasticsearch index that logs new user creation events. Then, make a query that identifies these events using fields such as `created_at` or a `new_user` flag. You can schedule this alert according to your preferences. Here are some resources that may be helpful: - [Alerting | Kibana Guide [8.16] | Elastic](https://www.elastic.co/guide/en/kibana/current/alerting-getting-started.html) - [Watcher email action | Elasticsearch Guide [8.16] | Elastic](https://www.elastic.co/guide/en/elasticsearch/reference/current/actions-email.html#:~:text=Use%20the%20email%20action%20to,definition%20or%20the%20account's%20email_defaults%20). ---
**Author:** ![sholzhauer](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sholzhauer/32/110282_2.png) [@sholzhauer](https://discuss.elastic.co/u/sholzhauer)\ **Post date:** [November 19, 2024, 8:25am UTC](https://discuss.elastic.co/t/automated-email-notification-once-new-user-created-in-kibana/370674/3 "2024-11-19T08:25:02Z")
To get this working you will have to enable the audit events for kibana/elasticsearch. You can then follow the steps from @jessgarson to create your alert. ---
**Author:** ![Manoilayans](https://avatars.discourse-cdn.com/v4/letter/m/50afbb/32.png) [@Manoilayans](https://discuss.elastic.co/u/Manoilayans)\ **Post date:** [December 11, 2024, 10:25am UTC](https://discuss.elastic.co/t/automated-email-notification-once-new-user-created-in-kibana/370674/4 "2024-12-11T10:25:01Z")
Pls let me know which index to mentioned for the new user creation event ? ---
**Author:** ![Manoilayans](https://avatars.discourse-cdn.com/v4/letter/m/50afbb/32.png) [@Manoilayans](https://discuss.elastic.co/u/Manoilayans)\ **Post date:** [December 11, 2024, 10:26am UTC](https://discuss.elastic.co/t/automated-email-notification-once-new-user-created-in-kibana/370674/5 "2024-12-11T10:26:06Z")
Pls let me know how to enable the Audit events.. is it Kibana level yml or Elasticsearch yml changes and which property to apply ? ---
**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\ **Post date:** [December 11, 2024, 1:24pm UTC](https://discuss.elastic.co/t/automated-email-notification-once-new-user-created-in-kibana/370674/6 "2024-12-11T13:24:06Z")
> [@Manoilayans](#): > > Pls let me know how to enable the Audit events.. is it Kibana level yml or Elasticsearch yml changes and which property to apply ? You would need to enable audit events and then ingest the audit logs to be able to create those alerts, but to enable audit events you need a paid license, platinum or enterprise. Do you have a paid license? If you are on the basic free license you cannot enable audit. ---
**Author:** ![jessgarson](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jessgarson/32/129841_2.png) [@jessgarson](https://discuss.elastic.co/u/jessgarson)\ **Post date:** [December 11, 2024, 3:11pm UTC](https://discuss.elastic.co/t/automated-email-notification-once-new-user-created-in-kibana/370674/7 "2024-12-11T15:11:48Z")
Thanks for your follow up, @Manoilayans. By index, I was referring to the audit log. I think our documention could be helpful here: [Enable logging and monitoring | Elasticsearch Service Documentation | Elastic](https://www.elastic.co/guide/en/cloud/current/ec-enable-logging-and-monitoring.html#:~:text=Audit%20logs%20are%20useful%20for,Select%20Save%20changes).